CardNav

I wish that it was easy to get in touch with someone about this. I loved this app for years, now I’m upset. I bank with a credit union. I have no idea how it happened, but someone hacked into the app and they were turning the card on after I turned it off! They were trying to transfer all of my savings into my checking, trying to steal everything that I have! Happy that my credit union did not let any transaction go through! These creeps tried several times and must have turned the card on after I turned it off almost a dozen times… so disappointed in something that I used to love and depend on.

As it says above, I love this app. After having my card compromised a few years ago, I began using this app to monitor transactions. It’s worked well with helping me stay on top of any suspicious activity. However, I wish there were more specific ways to limit transactions. I’ve looked at all of the categories, and while there are options, it’s not as specific as I’d like. For instance, I can deny in-store transactions out of my region but not online/mail/phone purchases. That needs to be changed as I recently had 5+ attempted charges that were mail/phone and were international. Unless there’s a way to limit those transactions without stopping them altogether that I’ve just not found. Also, I’d like to be able to approve certain retailers that I frequently use and only allow different stores/purchases on a case by case basis. This may be getting too specific for an app, but it would be helpful.

This app provides helpful functionality but falls short in a number of areas: 1) it doesn’t make it clear that the login is not your bank login despite displaying your banks logo. So I imagine a lot of people enter their bank log-in at first. 2) the app limits passwords to 8-12 characters. Welcome back to the 1990s. 3) the app requires you to manually logout. This is inconsistent with how every other app having access to financial data performs, 4) the app does not support touchid or faceID, 5) the app doesn’t work nicely with password managers 6) the app emails you your login id after registration. While it is fairly typical to email a user their iD when they indicate forgetting it, sending this automatically at registration unnecessarily makes that half of your login credentials more accessible to bad actors on the internet. These are all fairly basic things, so hopefully the backend security is done better.